Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16466217-dced-4a5a-a70d-36ae6ab6acbe.roa
File: 16466217-dced-4a5a-a70d-36ae6ab6acbe.roa (raw, json)
Hash identifier: V5AZxH+obaP9oPxYbNf5G2EZKgAenGHEt6nN31bTYfI=
Subject key identifier: 33:F2:F8:05:4C:1E:D7:11:8F:38:29:C6:7E:58:46:05:82:31:19:38
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 36DCB94A397EAA2D900E3BB9D366D21605624C36
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16466217-dced-4a5a-a70d-36ae6ab6acbe.roa
Signing time: Mon 28 Apr 2025 15:50:57 +0000
ROA not before: Mon 28 Apr 2025 15:50:57 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.92.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:dc:b9:4a:39:7e:aa:2d:90:0e:3b:b9:d3:66:d2:16:05:62:4c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 28 15:50:57 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=3141a0143fca56c1f46cb319758edae8e7141d57b8866e8dbeeaf51b7c5187ff, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:13:1d:dd:f3:83:23:1b:ae:b9:1b:5f:eb:
de:7c:e2:d6:e0:dd:72:42:0a:eb:28:7a:f4:1c:6b:
d4:96:75:c6:b2:03:00:43:4f:d7:f8:62:69:bf:3f:
7a:b8:6d:c4:59:11:f4:eb:90:80:62:3e:11:c1:2f:
54:c6:a7:36:d8:27:46:2c:0b:37:68:f1:41:d2:99:
47:f6:98:cf:2c:69:8d:e8:bb:4d:41:c2:e9:c0:36:
b6:69:85:1c:f9:a2:1e:61:8a:19:e4:be:f3:de:3c:
56:1c:aa:28:9f:0c:cc:a7:a7:ff:94:ea:c8:c5:2f:
f2:73:61:d4:12:7e:4b:91:5a:be:75:12:6a:10:ba:
88:b9:65:91:c9:78:c0:36:d4:33:4a:7b:75:54:79:
a7:fe:5b:68:de:d5:ec:7a:7e:c3:97:b3:16:29:75:
83:5e:34:f4:23:00:ce:42:64:cb:b7:74:b3:d1:8c:
5e:71:b8:87:4a:90:23:df:1e:9e:1a:53:3e:61:ff:
3f:1a:2f:38:f8:4d:8a:93:ab:35:f1:2e:e5:14:0a:
81:ee:dc:f0:9c:86:98:4b:a0:79:3e:12:58:7f:89:
bd:c5:ca:13:9f:c4:6f:0b:f5:a5:41:4f:30:9e:55:
58:08:7b:aa:34:90:dc:a8:2c:56:a4:97:c3:6d:f3:
a5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F2:F8:05:4C:1E:D7:11:8F:38:29:C6:7E:58:46:05:82:31:19:38
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16466217-dced-4a5a-a70d-36ae6ab6acbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.92.0.0/14
Signature Algorithm: sha256WithRSAEncryption
c5:d2:65:c2:e4:c7:09:23:77:af:c6:f0:bd:e5:4e:72:b4:74:
c6:cd:57:39:86:02:5d:36:e8:43:c5:f5:4f:4a:f7:a2:99:83:
b1:98:0a:5b:15:0c:71:59:3a:ae:40:10:1f:8e:a8:5b:b5:52:
e0:15:7f:5d:58:9b:22:aa:8b:4e:49:1c:0d:39:5b:ab:ef:24:
94:ac:d4:91:25:26:f3:e4:6b:df:bc:e8:f8:f2:36:c4:b4:12:
21:0c:42:8b:80:0a:b9:e1:c8:df:f1:2a:82:12:9c:a4:29:93:
8f:e6:b5:5a:2b:6a:e2:d2:35:e0:d7:1d:8a:bb:99:5a:28:e6:
ef:db:6d:07:49:14:cf:19:f0:63:45:97:46:f4:cc:d2:b1:66:
ed:72:11:b7:2d:bc:8f:d9:97:c5:88:95:99:31:29:4c:06:f1:
dc:fa:3a:eb:e7:6c:b8:b1:10:88:a6:e0:15:56:e6:3e:3a:76:
e3:3d:99:fb:fd:51:21:0d:60:8a:5e:39:cf:50:98:57:49:67:
ef:8f:17:a6:83:9d:c7:29:21:04:79:a0:f9:fc:c0:13:a6:2d:
e3:60:0b:50:bd:38:66:4d:5b:b5:8c:f4:83:55:63:c4:6b:ba:
27:e2:97:f1:63:e0:93:03:39:72:48:d0:1d:e9:bb:54:02:92:
38:ff:fc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:27:14 2025 by rpki-client